StackRadar

CVE-2026-77310

Medium

Advisory

Published 28 Sept 2026In the index since 29 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
963
of 17,957 indexed, latest versions
Container images
955
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserialization

Carried by container images the latest versions of 963 of 17,957 indexed charts deploy, on 955 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.0.5, 2.2.3, 2.3.0, 2.3.3+112 more2.18.9, 2.21.5, 2.22.1, 3.1.5+1 more955
OSV records
GHSA-vvgp-rfg2-7rr6
Trending
Rank 4 in indexed charts, since 29 Sept 2026. See the ranking →

Charts affected

963 by stars
ChartLatestAffected imagesRadar Score
proxerajfwenischVerified publisher0.12.201 of 1See more

proxera jfwenisch 0.12.20

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
ghcr.io/wenisch-tech/proxera:0.12.205ac0e9f6b42f
jackson-databind@2.21.4
2.21.5

Open the chart page →

243
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
jackson-databind@2.18.1
2.18.9

Open the chart page →

7,268
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
jackson-databind@2.18.1
2.18.9

Open the chart page →

7,250
spring-boot-chartjhidalgo3-githubVerified publisher4.0.01 of 1See more

spring-boot-chart jhidalgo3-github 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
jhidalgo3/spring-echo-example:lateste08733191ea0
jackson-databind@2.11.4
2.18.9

Open the chart page →

1,755
xxl-job-adminjoelee2012Verified publisher1.1.01 of 2See more

xxl-job-admin joelee2012 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
xuxueli/xxl-job-admin:2.4.0640093c35fd6
jackson-databind@2.13.5
2.18.9

Open the chart page →

3,187
james-mailserverjondos2.1.21 of 1See more

james-mailserver jondos 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
apache/james:distributed-3.7.2660c0fa12ec2
jackson-databind@2.13.2.2
2.18.9

Open the chart page →

8,205
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
jackson-databind@2.17.0
2.18.9

Open the chart page →

67,864
k8sforjavak8sforjava0.1.01 of 1See more

k8sforjava k8sforjava 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
vincentgwzhang/k8sforjava:latesta9139f2cd98f
jackson-databind@2.18.2
2.18.9

Open the chart page →

1,548
dynamo-dbk8s-home-lab-repo0.0.31 of 1See more

dynamo-db k8s-home-lab-repo 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
amazon/dynamodb-local:1.20.01ed00881c937
jackson-databind@2.12.7
2.18.9

Open the chart page →

483
k8skeycloak-controllerk8skeycloak-controller0.1.21 of 1See more

k8skeycloak-controller k8skeycloak-controller 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/k8skeycloak-controller:v0.0.19befc51b1ad6
jackson-databind@2.12.5
2.18.9

Open the chart page →

4,131
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
jackson-databind@2.17.3
2.18.9

Open the chart page →

7,864
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
jackson-databind@2.15.0
2.18.9

Open the chart page →

3,889
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
jackson-databind@2.13.3
2.18.9

Open the chart page →

7,620
jenkinskallakruparaju-jenkins1.0.01 of 1See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.5

Open the chart page →

2,766
kanbanapp-demokanbanapp-demo0.3.01 of 3See more

kanbanapp-demo kanbanapp-demo 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
jackson-databind@2.9.9
2.18.9

Open the chart page →

7,494
keyauthoritykeyauthorityVerified publisher0.2.271 of 5See more

keyauthority keyauthority 0.2.27

1 of the 5 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
keyauthoritydh/keycloak:26.7.1-r1903c69d4ee97
jackson-databind@2.21.2
2.21.5

Open the chart page →

1,812
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
jackson-databind@2.14.1
2.18.9

Open the chart page →

71,975
cratedbkrateo0.1.41 of 1See more

cratedb krateo 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/crate:5.9.66318aab35613
jackson-databind@2.17.2
2.18.9

Open the chart page →

1,205
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
jackson-databind@2.11.3
2.18.9

Open the chart page →

9,159
dinsrokronkltdVerified publisher0.1.71 of 2See more

dinsro kronkltd 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
duck1123/dinsro:latest9568c5961d5d
jackson-databind@2.14.2
2.18.9

Open the chart page →

1,834
tampkubebb5.6.01 of 2See more

tamp kubebb 5.6.0

1 of the 2 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
kubebb/gateway-api:v5.6.04d062f20309c
jackson-databind@2.13.4
2.18.9

Open the chart page →

4,721
tapm-componentkubebb5.7.12 of 3See more

tapm-component kubebb 5.7.1

2 of the 3 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
refar/apm-api:v5.7.1241373fa2972
jackson-databind@2.11.1
2.18.9
refar/apm-operator-server:v5.7.1e5490f050f9f
jackson-databind@2.11.1
2.18.9

Open the chart page →

10,354
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
kubebb/mesh-api:v5.7.0a3879931dfa1
jackson-databind@2.13.3
2.18.9

Open the chart page →

6,546
sonarqubekubesphereVerified publisher6.7.01 of 3See more

sonarqube kubesphere 6.7.0

1 of the 3 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
library/sonarqube:8.9-communityeb2f0be32efd
jackson-databind@2.13.2.2
2.18.9

Open the chart page →

2,344
skywalkingkubesphere-carryon-experimental0.6.02 of 5See more

skywalking kubesphere-carryon-experimental 0.6.0

2 of the 5 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:6.5.0c1ee839ccad0
jackson-databind@2.9.5
2.18.9
apache/skywalking-ui:6.5.0a84f9d9b8067
jackson-databind@2.8.11.1
2.18.9

Open the chart page →

13,544
clickhousekubesphere-carryon-test0.1.11 of 2See more

clickhouse kubesphere-carryon-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
radondb/zookeeper:3.6.216981604f1a0
jackson-databind@2.10.3
2.18.9

Open the chart page →

6,911
hertzbeatkubesphere-carryon-test1.4.11 of 4See more

hertzbeat kubesphere-carryon-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
jackson-databind@2.10.5
2.18.9

Open the chart page →

8,038
nacoskubesphere-carryon-test0.1.11 of 1See more

nacos kubesphere-carryon-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
nacos/nacos-server:1.4.1fe6e5688cdf3
jackson-databind@2.10.4
2.18.9

Open the chart page →

4,214
skywalkingkubesphere-carryon-test3.1.02 of 4See more

skywalking kubesphere-carryon-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
jackson-databind@2.9.5
2.18.9
apache/skywalking-ui:8.1.067d50e4deff4
jackson-databind@2.9.10
2.18.9

Open the chart page →

18,090
fpga-operatorkubesphere-stable2.7.41 of 7See more

fpga-operator kubesphere-stable 2.7.4

1 of the 7 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
inaccel/coral:2.18c53744ed70b
jackson-databind@2.13.5
2.18.9

Open the chart page →

5,826
clickhousekubesphere-testVerified publisher0.1.11 of 2See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
radondb/zookeeper:3.6.216981604f1a0
jackson-databind@2.10.3
2.18.9

Open the chart page →

6,911
nacoskubesphere-testVerified publisher0.1.11 of 1See more

nacos kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
nacos/nacos-server:1.4.1fe6e5688cdf3
jackson-databind@2.10.4
2.18.9

Open the chart page →

4,214
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
jackson-databind@2.15.2
2.18.9
penpotapp/exporter:2.2.15c835ffd87ab
jackson-databind@2.12.4
2.18.9

Open the chart page →

18,366
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
jackson-databind@2.17.2
2.18.9

Open the chart page →

3,361
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
jackson-databind@2.17.1
2.18.9

Open the chart page →

3,589
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
jackson-databind@2.17.1
2.18.9

Open the chart page →

8,089
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
jackson-databind@2.14.2
2.18.9

Open the chart page →

4,269
imageboxkyso1.0.01 of 1See more

imagebox kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
kyso/imagebox:latest68091eace89c
jackson-databind@2.9.8
2.18.9

Open the chart page →

3,829
mock-oidclabs64io-helm-chartsVerified publisher0.1.21 of 1See more

mock-oidc labs64io-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
ghcr.io/navikt/mock-oauth2-server:2.1.1065d4ed47ce09
jackson-databind@2.17.2
2.18.9

Open the chart page →

803
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
ladeit/ladeit:latest962b665ffe82
jackson-databind@2.9.7
2.18.9

Open the chart page →

26,887
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.9

Open the chart page →

20,652
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.9

Open the chart page →

20,652
wiremocklebenitzaVerified publisher0.3.11 of 1See more

wiremock lebenitza 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.27.22328a9fce2bf
jackson-databind@2.11.0
2.18.9

Open the chart page →

2,453
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.5

Open the chart page →

4,738
komgalinkding0.2.31 of 1See more

komga linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
gotson/komga:1.22.0ba892ab3e082
jackson-databind@2.18.1
2.18.9

Open the chart page →

3,228
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.9

Open the chart page →

20,652
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
jackson-databind@2.13.5
2.18.9

Open the chart page →

6,929
allure_docker_servicelovemew67Verified publisher0.0.11 of 1See more

allure_docker_service lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.27.00815040339a9
jackson-databind@2.16.1
2.18.9

Open the chart page →

68,562
efklovemew67Verified publisher0.0.11 of 2See more

efk lovemew67 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
nshou/elasticsearch-kibana:kibana7a1d1e36814d1
jackson-databind@2.14.2
2.18.9

Open the chart page →

3,989
vulnerability-scaninglovemew67Verified publisher0.0.31 of 2See more

vulnerability-scaning lovemew67 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-77310.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.35.14154286c0209
jackson-databind@2.20.0
2.21.5

Open the chart page →

5,529

Container images carrying it

955 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/strimzi/operator:0.45.158c727cd2e68
jackson-databind@2.16.2
2.18.9
1
quay.io/strimzi/operator:0.32.0c5e0e5dca750
jackson-databind@2.13.4.1
2.18.9
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
jackson-databind@2.14.2
2.18.9
1
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
jackson-databind@2.17.2
2.18.9
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.1126450354eba9
jackson-databind@2.13.5
2.18.9
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.